Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us:

• Account Information: Username, email address, and password (encrypted)
• Profile Information: Optional profile details you choose to provide
• Payment Information: Processed securely by our payment processor (Lemon Squeezy)
• Communications: Messages, feedback, and support requests you send to us

1.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage Data: Features used, time spent, frequency of use
• Conversation Data: Your chat messages and AI responses
• Device Information: Browser type, operating system, IP address
• Log Data: Access times, pages viewed, errors encountered
• Cookies and Similar Technologies: Session management and preferences

1.3 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction and billing information from Lemon Squeezy
• Authentication Providers: If you use third-party login services
• Analytics Services: Aggregated usage statistics

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Provision

• Provide, maintain, and improve the Service
• Process your requests and transactions
• Manage your account and subscriptions
• Enable conversation history and sharing features

2.2 Communication

• Send service-related announcements and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Notify you about account or subscription changes

2.3 Analytics and Improvement

• Analyze usage patterns and trends
• Improve AI model performance and accuracy
• Develop new features and services
• Monitor and analyze Service performance

2.4 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and property

3. Data Sharing and Disclosure

3.1 Service Providers

We share information with third-party service providers who assist us:

• Cloud Services: Cloud hosting and AI processing
• Lemon Squeezy: Payment processing and billing
• Google: Web search functionality
• Analytics Providers: Usage analysis and performance monitoring

3.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Enforce our agreements and policies
• Protect the rights, property, or safety of ZED AI, users, or others
• Prevent fraud or security threats

3.3 Business Transfers

If ZED AI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.4 With Your Consent

We may share information for other purposes with your explicit consent.

4. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal information within 90 days, except as required by law.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data in transit (TLS/SSL) and at rest
• Access Controls: Limited employee access on a need-to-know basis
• Authentication: Secure password hashing (bcrypt)
• Monitoring: Regular security audits and vulnerability assessments
• Infrastructure: Enterprise-grade security features and best practices

However, no security system is impenetrable. We cannot guarantee absolute security.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to access and export your personal data.

6.2 Correction and Update

You can update your account information at any time through your profile settings.

6.3 Deletion

You can request deletion of your account and personal data. We will comply except where retention is required by law.

6.4 Opt-Out

You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or adjusting your account settings.

6.5 Do Not Track

Some browsers support "Do Not Track" signals. We currently do not respond to these signals.

6.6 Regional Rights

Depending on your location, you may have additional rights under:

• GDPR (EU): Right to data portability, right to object, right to restriction
• CCPA (California): Right to know, delete, and opt-out of sale
• Other Jurisdictions: Rights as provided by local law

7. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Authentication and security
• Functional Cookies: Remember your preferences
• Analytics Cookies: Understand how you use the Service

You can control cookies through your browser settings, but disabling cookies may limit Service functionality.

8. Children's Privacy

The Service is not intended for children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Adequacy decisions by regulatory authorities
• Privacy Shield frameworks (where applicable)

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via:

• Email notification
• Service notification
• Posting on our website

Continued use of the Service after changes constitutes acceptance.

12. California Privacy Rights

California residents have specific rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to equal service and price

Note: We do NOT sell your personal information.

13. European Privacy Rights

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

• Email: privacy@hellozed.com
• Support: support@hellozed.com
• Data Protection Officer: dpo@hellozed.com

15. Complaints

If you believe we have not complied with this Privacy Policy or applicable laws, you have the right to lodge a complaint with:

• Our Data Protection Officer
• Your local data protection authority
• The supervisory authority in your jurisdiction